Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/323830343a326439383a3a2f33332d3333203d3e203631353739.roa
File:                     323830343a326439383a3a2f33332d3333203d3e203631353739.roa (raw, json)
Hash identifier:          0L+Ka0zFoxH3Xs7/hqMkcb/DnCVAdWYTmtKh2YPVf6I=
Subject key identifier:   B9:06:3D:98:E5:6A:DA:7B:F5:36:E5:8A:50:41:78:DA:1B:95:2E:31
Certificate issuer:       /CN=A16E92EEB112A1D523A2817401B6EB3CE09AFFFC
Certificate serial:       231D36BB8A7E8918056BAAA999142E9C4238C5DC
Authority key identifier: A1:6E:92:EE:B1:12:A1:D5:23:A2:81:74:01:B6:EB:3C:E0:9A:FF:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/323830343a326439383a3a2f33332d3333203d3e203631353739.roa
Signing time:             Tue 06 Feb 2024 12:01:39 +0000
ROA not before:           Tue 06 Feb 2024 11:56:39 +0000
ROA not after:            Tue 04 Feb 2025 12:01:39 +0000
asID:                     61579
IP address blocks:        2804:2d98::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:1d:36:bb:8a:7e:89:18:05:6b:aa:a9:99:14:2e:9c:42:38:c5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A16E92EEB112A1D523A2817401B6EB3CE09AFFFC
        Validity
            Not Before: Feb  6 11:56:39 2024 GMT
            Not After : Feb  4 12:01:39 2025 GMT
        Subject: CN=B9063D98E56ADA7BF536E58A504178DA1B952E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:94:20:b9:ee:7d:59:ea:32:d8:26:a9:50:41:
                    49:c8:13:38:26:68:0a:11:28:f2:50:e8:14:6d:9a:
                    46:93:5e:b1:d3:55:03:16:1a:ae:b0:2d:a4:75:4e:
                    93:89:f6:90:3f:ea:0f:50:87:59:45:13:f0:d3:df:
                    61:9b:a8:4e:e3:a7:0b:7b:61:23:29:0b:32:2c:3d:
                    49:ba:44:2d:10:f8:ad:ad:4a:b6:1d:68:5b:23:a8:
                    33:d4:e7:e9:32:9f:c3:de:35:3e:00:da:d8:c3:94:
                    41:bd:67:d9:d2:8a:09:2f:d2:00:d0:38:fc:4f:df:
                    d2:56:8b:25:f5:79:d8:3a:27:3c:9d:2a:0c:24:63:
                    67:36:9f:80:8c:84:ff:88:95:7a:62:f9:98:bc:38:
                    30:17:cc:c2:bf:fa:08:ee:bb:e5:93:8b:76:a3:3e:
                    0b:d4:fe:62:fb:5e:85:ca:07:60:12:33:86:91:6e:
                    99:16:09:e1:50:10:b7:ee:79:36:b5:fb:a0:18:4e:
                    d2:fe:72:78:cb:43:a7:f5:d5:0d:bf:98:f4:66:69:
                    46:a9:4a:f1:0e:17:c0:9b:57:82:dd:7e:43:9a:91:
                    72:69:38:9d:8e:34:06:94:93:f0:48:d4:2a:04:28:
                    c0:40:30:b0:0c:7b:be:1d:05:7a:2d:fb:dc:af:93:
                    21:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:06:3D:98:E5:6A:DA:7B:F5:36:E5:8A:50:41:78:DA:1B:95:2E:31
            X509v3 Authority Key Identifier:
                keyid:A1:6E:92:EE:B1:12:A1:D5:23:A2:81:74:01:B6:EB:3C:E0:9A:FF:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A16E92EEB112A1D523A2817401B6EB3CE09AFFFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/323830343a326439383a3a2f33332d3333203d3e203631353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d98::/33

    Signature Algorithm: sha256WithRSAEncryption
         54:e1:3f:b4:26:e1:aa:57:e6:62:43:28:f3:a4:df:b8:5e:f1:
         5b:c0:58:f0:76:94:23:14:c8:60:6e:58:8f:54:fe:ad:49:4d:
         bc:e2:ac:65:c6:0c:d9:59:5b:31:56:26:d1:69:3b:b6:03:fd:
         7b:8b:e8:ad:98:a2:80:48:2c:f2:1f:b8:b0:85:a6:75:d4:10:
         f0:ba:ce:36:cd:ec:15:c7:ba:27:7f:43:f4:fb:a6:e4:45:97:
         8e:9a:49:24:3b:c9:93:66:77:ed:5e:4b:13:1b:29:29:33:63:
         91:e6:2c:3a:80:6f:36:4a:f5:f5:b6:77:99:5f:93:61:11:eb:
         a5:b2:da:3e:2f:3c:cd:6a:c5:13:d1:d3:d7:eb:21:88:7f:41:
         11:a0:c8:45:66:4d:84:fb:02:db:34:da:09:5f:48:87:f5:8c:
         95:ac:01:43:cb:df:ed:42:81:2c:76:4c:70:9e:b2:15:f8:99:
         79:12:83:0b:69:44:df:d1:4f:46:25:0c:8b:24:1e:f5:8a:a8:
         1f:5c:82:7d:30:30:ad:69:17:1a:bb:4a:1d:26:f7:53:b6:0c:
         02:e2:81:f1:30:6d:a8:29:b8:aa:ab:56:8c:f7:05:98:70:88:
         2b:b7:63:77:87:18:1a:ec:3a:ae:9c:87:ef:70:22:cc:98:c9:
         ee:c0:41:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org